I understand you are tempted to punch a hole to allow access to the port 15672. There is a better way without lifting your firewall. To access from the local machine, better create a temporary SSH tunnel to your server: